orkutt.exe [md5:c43c528]

显示全部楼层 · 发表于 2008-5-28 06:37:55

发点banker

File:	orkutt.exe
Status:	INFECTED/MALWARE
MD5:	c43c5284a578d91d90bdd932664e75c0
Packers detected:	PKLITE32

Scanner results
Scan taken on 27 May 2008 22:34:58 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Spy.Gen
ArcaVir	Found Trojan.Spy.Banker.Nfr
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Crypt.Delf.B
ClamAV	Found nothing
CPsecure	Found Troj.Spy.W32.Banker.neu
Dr.Web	Found Trojan.PWS.Banker.origin
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Spy.Win32.Banker.nfr
Fortinet	Found nothing
Ikarus	Found Trojan-Spy.Win32.Banker.dgh
Kaspersky Anti-Virus	Found Trojan-Spy.Win32.Banker.nfr
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found Mal/Behav-180
VirusBuster	Found TrojanSpy.Banker.BCHD
VBA32	Found Trojan-Spy.Win32.Banker.nfr

显示全部楼层 · 发表于 2008-5-28 06:41:51

Time Module Event User
2008/5/28 6:41:34 Kernel The file 'G:\v\orkutt.exe' has been sent to ESET's labs for analysis.

显示全部楼层 · 发表于 2008-5-28 06:45:32

不明白你还给eset发什么发，鸟都不鸟你，eset早就没希望了，还不如换到avg

显示全部楼层 · 发表于 2008-5-28 06:46:43

原帖由 mofunzone 于 2008-5-28 06:45 发表
不明白你还给eset发什么发，鸟都不鸟你，eset早就没希望了，还不如换到avg

反正都没事等我回来了把XP安了 vista就留个360 XP按AVG了

然后等待新版如果新版还不更换引擎那我也只能说88了

显示全部楼层 · 发表于 2008-5-28 07:18:59

http://www.threatexpert.com/repo ... 91d90bdd932664e75c0

显示全部楼层 · 发表于 2008-5-28 11:24:07

orkutt.rar
[0] Archive type: RAR
--> orkutt.exe
[DETECTION] Is the Trojan horse TR/Spy.Gen
[NOTE] The file was moved to '48a7d0c2.qua'!

显示全部楼层 · 发表于 2008-5-28 14:39:37

奇迹了。。。。

今天居然搞定BANKER。。。

看看以前的BANKER有没有反应。。。

显示全部楼层 · 发表于 2008-5-28 18:07:38

显示全部楼层 · 发表于 2008-5-28 19:51:25

[Found downloader] <W32/Downloader.H.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\orkutt.rar->orkutt.exe->(PKLite32)

---------------------------------------------------------------------
Scan ended: 2008-5-28, 19:51:15
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-28 19:51:50

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\orkutt.rar<RAR>:orkutt.exe <- Trojan.Spy.Banker.Nfr : No action

Scanned objects : 2

Infected objects : 1
处理速度还可以

[病毒样本] orkutt.exe [md5:c43c528]

本帖子中包含更多资源

回复 2楼 woai_jolin 的帖子

本帖子中包含更多资源

本帖子中包含更多资源

F-Prot 4.4.4

ArcaVir2008

浏览过的版块